Solve Windows 2000 DNS server problems

By Peter Parsons, TechRepublic, 19 May, 2003 13:03

The BOOT file
When checking the BOOT file, you should see various entries such as the primary record, the secondary record (if applicable in your DNS installation), and a cache record. You should see something like this:

1 primary tweedldee.com tweedldee.com.dns
2 secondary tweedldum.com 100.100.100.103 tweedldum.com.dns
3 cache . cache.dns

Please note that the numbers on the left are line numbers I put in for my example -- you won't see them in the BOOT file. Line 1 indicates that this DNS server is primary and authoritative for tweedldee.com and that the zone file for this domain is called tweedldee.com.dns. Line 2 indicates that this server is also a secondary server for tweedldum.com. The IP address you see is the one pointing to the primary name server of tweedldum.com. The tweedldum.com.dns entry is the name of the secondary zone file for tweedldum.com. In Line 3, you'll see the entry for the cache file. The dot refers to the root servers, whether they're local or the 13 on the Internet. They have no name because they are the top-level name resolvers. Finally, cache.dns refers to the name of the file itself. So, if your dead DNS server has intact cache and zone files, and it received boot information from Active Directory or the registry, how do you fix it and get DNS going again? First, install DNS on a new server and set it to boot from the BOOT file instead of from Active Directory and/or the registry. Then stop the DNS service and restore the cache and zone files to %systemroot%\system32\dns. But, you say, you don't have a BOOT file, so you can't start DNS anyway. Maybe not, but using the information and layout above, you can write your own BOOT file in no time. You know what needs to be in your BOOT file because you know the names of all the zone files. If you need IP addresses for secondary records, you can open the relevant secondary zone file(s) and find them. Once this is done, you can start the DNS server again, and you should have your network up and running in no time. Apart from its simplicity, this method gets Active Directory working again because the zone files contain all the necessary data, such as SRV records, needed to locate domain controllers for Active Directory replication and other Active Directory activities. To be sure it all works, run NSLOOKUP and run some queries. Best practices
Here are some suggestions to help you design and configure your DNS deployment to prevent trouble:

Make sure you have redundancy in your DNS server infrastructure. This means using more than one server to host each DNS zone.
Make sure that the email address for the zone administrator is correctly entered into the zone information because DNS will use this address to send alerts for a variety of DNS illnesses. Email addresses in DNS are entered with a period (.), not an ampersand (@). For example, admin@mydomain.com must be entered as admin.mydomain.com.
Use ADI zones, but set the BootMethod to use the BOOT file rather than Active Directory or the registry.
Use secure DDNS.
If you have a large network, consider installing one or more dedicated caching-only DNS servers to offload the other servers.
If you're using DHCP with the above option, make sure you provide each client with two DNS server addresses in case one of the DNS servers breaks. This way, clients can resolve names and they can also continue to update their A and PTR records via DDNS.

Of course, if none of these approaches fits, you'll most likely either need to restore DNS services from a backup, build a new domain from scratch (ouch), or find a new job, preferably on some distant beach. Editorial disclaimer: The authors and editors have taken care in preparation of the content contained herein but make no expressed or implied warranty of any kind and assume no responsibility for errors or omissions. No liability is assumed for any damages. Always have a verified backup before making any changes.

More enterprise IT news in ZDNet UK's Tech Update Channel.

For a weekly round-up of the enterprise IT news, sign up for the Tech Update newsletter. Let the editors know what you think in the Mailroom.

« Previous
1
2
3
Next »

Talkback

"Cannot find server or DNS Error
Internet Explorer ..."

Hello Can any one help please.. I am having problems viewing my web site.. when I type my web address in the address bar I am getting the following message " Cannot find server or DNS Error Internet Explorer ". What very strange is that some people can see the site for there location and others can't, like myself.
If I type in my IP address( i.e 123.76.890.9) it will bring up the site...

Has this happen to anyone before? Do you know if there is a way it can be fixed?

I would like you help with this one please because it's driving me mad..

Regards
Richard

via Facebook 15 August, 2003 00:07

Hi Rechard

I understood u r problem but more than that i want to know what kind of setup u r having at ur end. bkz, if u r having firewall and ur site ( 123.76.890.9) on DMZ, from LAN u can can access the site with IP address by routing it, at the same time if you want to use ur domain name u should have http access to ur system. plz verify that.

This is one case, If u can give me picture i can help u

waht is this IP Address ( 123.76.890.9)?
--
Raman

via Facebook 22 May, 2004 09:37

I to have the same problem and got the same error, but only after I uninstalled Trend Micro PC-Cillin Internet Security for SMB. Now, IE is pointed to my server address, trying to bring up the monitor manager it used to be pointed to.

Have you installed any software lately that uses advanced security settings?

takers

via Facebook 29 September, 2004 20:00

dns problem

via Facebook 29 October, 2005 12:12

"Cannot find server or DNS Error"
This message only appears for me when I am trying to access a password protected site, such as hotmail or internet banking (once I have typed my password in).

Does anyone have any idea of what is causing this and how I can solve it? I have tried restoring my settings to a previous date, and deleting temporary cookies and files, but still to no avail.

I did have Norton installed on PC for its free period, but have not got AVG and messages keep on coming up from Norton saying PC is not protected (when it is - by AVG). Could this be the issue? (I can't seem to uninstall Norton).

If anyone could help would be most grateful as really want to read e-mails! Sorry Peter for piggybacking onto your query!

via Facebook 24 November, 2005 10:02

Hi
I'm having the same problem wth DNS Server Error. My provider Wanadoo broadband cannot help me and I am really stuck. I can access websites but when I try to enter internet banking, checkouts, bidding sites I get the error message. I would be really grateful if anybody could help me out with this - it's driving me nuts!

via Facebook 29 November, 2005 15:51

Try using ethereal to capture your packets (its easier than it sounds). Then compare a good DNS request with a bad. Voilla you have something to go on.

You can make ethereal filter so that only the DNS requests are captured, so this will prevent any confusion finding the correct packets. If that doesn't turn anything up; turn off the filter and see if there is anything obvious.

Ethereal will decide the packets for you _ I don't know how well you understand protocols but usually and passing interest ios enough to get you through

via Facebook 17 February, 2006 10:43

hi i have fixed this problem many times...
actually if you try to ping ur web site name with www.name.com it will say unknown host and if u try to ping by ip it gives u results.

well 2 issues.....problem with tcp stack...
or a winsock issues...

rebuild/reinstall tcp/ip stack....
or do a winsock fix...
hklm/system/current control set/services/winsock
hklm/system/current control set/services//winsock2
delete both keys .. makse sure u take backup 1st ...
restart the computer..
windows will make a fresh stack of tcp ip....default( c:\windows\inf)
and these keys,,,
u shld be good to go ...lemme knw
dhimanvishal@gmail.com

vishu 21 December, 2006 00:49

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

ZDNet UK Live

If you are looking for full parental control that monitors & controls everything kids do online (including Facebook) , as well as blocks...

2 minutes ago by marty@gomcgruff.com on TalkTalk: Don't force ISPs across porn-filter Rubicon

I also installed the KDE version; I also will probably try out razorqt since I really haven't had a chance to before. I'm looking forward to the...

3 hours ago by Thomas Gellhaus via Facebook on Mageia 2 Released

Acquiring when reinvention/cannibalization is too challenging for a large organization can be an excellent strategy- still, so many mergers stumble...

6 hours ago by francisabigail on Ariba buy parks SAP on Oracle's cloud turf

All of the feedback regarding using a touch monitor for a desktop PC is right on. Several months ago, we installed a "demo" multitouch all-in-one...

11 hours ago by apexwm on Windows 8 could speed multi-monitor uptake

anyone wanting to triple boot *their* own Mac

12 hours ago by 191706 on xTreme Triple Booting: Linux, Mac & Windows

Cont.. Biggest Bugbear: Win7's stop-animate-go approach to work, you develop a staggered (not in the above alchohol sense of the word) approach to...

12 hours ago by SoapyTablet on Windows 8 could speed multi-monitor uptake

Ah the joys of Windows 8 Consumer Preview... If Windows 7 was 'Vista with Lipstick', whats Windows 8? Vista with Lipstick, the morning after?...

12 hours ago by SoapyTablet on Windows 8 could speed multi-monitor uptake

Though the metro look is quite cool on the windows mobile platform I think that think that microsoft ARE MESSING THINGS UP because what has they...

13 hours ago by daveveej on Windows 8 could speed multi-monitor uptake

I agree, we have a few touch screen monitors in work but as Windows7 and the applications we use are not touch screen friendly (the size of the...

13 hours ago by Custonian on Windows 8 could speed multi-monitor uptake

I find it amusing that Microsoft added the mouse, which was deemed awkward, but people were forced to use it so it stuck, and now they're saying,...

16 hours ago by archerthom on Windows 8 could speed multi-monitor uptake

Agree with other comments. Nobody's going to start reaching out to start tapping their desktop monitors with their fingers. Their arms would tire...

1 day ago by BrownieBoy on Windows 8 could speed multi-monitor uptake

The only way a touch monitor would be any good is if it were horizontal on the desk, with a virtual keyboard so you could do away with that as well...

1 day ago by Random_Error on Windows 8 could speed multi-monitor uptake

This is just dumb! Forget that I think Windows 8 will bomb, but really, people are going to go out and buy touch Monitors now??? Just pretend...

1 day ago by JBDragon on Windows 8 could speed multi-monitor uptake